Skip to content

Conversation

@ScreaMy7
Copy link
Collaborator

@ScreaMy7 ScreaMy7 commented Mar 27, 2025

Closes OWASP/maswe#78

This PR adds a new MASWE and DEMO:

New MASWE

  • Adds MASWE-0067 including information about the risks and mitigations associated with the debuggable flag in Android and iOS applications.

New Demo

  • Created MASTG-DEMO-0040 to demo the test case for the debuggable flag in the Android manifest using semgrep.

@ScreaMy7 ScreaMy7 changed the title [MASWE-0067] New MASWE Weakness [MASWE-0067] New MASWE Weakness (by @appknox) Mar 27, 2025
@cpholguera cpholguera changed the title [MASWE-0067] New MASWE Weakness (by @appknox) [MASWE-0067] New MASWE Debuggable Flag Not Disabled (by @appknox) Apr 4, 2025
@cpholguera
Copy link
Collaborator

@ScreaMy7 review done, please take a look.

@ScreaMy7
Copy link
Collaborator Author

ScreaMy7 commented Apr 7, 2025

@cpholguera, I have updated it with the changes suggested.

@cpholguera cpholguera changed the title [MASWE-0067] New MASWE Debuggable Flag Not Disabled (by @appknox) [MASWE-0067] New MASWE Debuggable Flag Not Disabled and MASTG-DEMO-0040 (by @appknox) Apr 7, 2025
Copy link
Collaborator

@cpholguera cpholguera left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks a lot @ScreaMy7 !

@cpholguera cpholguera merged commit 1f4259d into OWASP:master Apr 7, 2025
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[MASWE-0067] New MASWE Weakness

2 participants